Understanding the insider threat, from a lawyer’s perspective